Google patches critical CI RCE in Gemini CLI and tightens workspace trust

Google fixed a critical remote code execution in the Gemini CLI used in CI workflows, addressing a 10.0 CVSS flaw that could load malicious configuration from untrusted folders. Updates require explicit workspace trust and offer two paths: set GEMINI_TRUST_WORKSPACE='true' for trusted inputs or follow Google's hardening guidance for untrusted inputs (including changes to the --yolo mode). Separately, Novee Security highlighted a high-severity Cursor vulnerability (CVE-2026-26268, CVSS 8.1) enabling prompt-injection-based code execution via a malicious Git hook, plus a related CursorJacking-like local API-key access flaw; both underscore risks from untrusted inputs and extensions and emphasize using trusted sources and restricted access.